Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json)
Hash identifier: TibN7oRijpT4ayKgdpFUkS3//iFBF9IIWaq774YFRgI=
Subject key identifier: D1:95:55:C4:26:45:1C:CA:C0:DC:0B:9A:35:93:85:ED:FB:BE:F6:E1
Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Certificate issuer: /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Certificate serial: 019F91A3696D4C1628734ACE6A95B863F06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
Manifest number: 0AA2
Signing time: Fri 24 Jul 2026 01:00:33 +0000
Manifest this update: Fri 24 Jul 2026 01:00:33 +0000
Manifest next update: Sat 25 Jul 2026 01:00:33 +0000
Files and hashes: 1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: Ud7Kj5AODSKsA/Fc8LsGmqXPRctGJrAVoxNiFze38IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:69:6d:4c:16:28:73:4a:ce:6a:95:b8:63:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Validity
Not Before: Jul 24 01:00:33 2026 GMT
Not After : Jul 25 01:00:33 2026 GMT
Subject: CN=d19555c426451ccac0dc0b9a359385edfbbef6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:3c:87:5b:5a:fb:38:fa:a7:4d:ae:46:2f:
e7:1b:7a:16:c9:f3:e7:97:0b:e6:ac:3a:f0:7f:45:
7d:39:55:1b:85:d1:75:6b:83:b7:65:ce:15:14:ac:
f5:46:d5:59:10:34:de:56:3a:ca:af:94:10:0e:45:
ae:cc:70:7b:9a:e1:4b:84:22:1f:3e:61:fc:e8:a5:
96:76:84:88:5d:f1:61:13:05:63:a8:e9:4b:e8:5f:
4c:b5:8e:05:db:25:e2:0c:e6:9d:4e:f3:c2:93:b8:
f0:ee:fd:db:d5:03:9a:a5:01:dc:66:11:e2:82:b6:
cd:a1:49:66:a3:65:9d:4c:d3:16:ff:31:61:41:fd:
66:72:b1:52:a7:09:63:64:c8:13:91:5c:dc:ce:38:
9c:b0:b5:a7:d3:ee:92:18:e6:d0:dc:fc:1e:db:91:
10:3a:fe:f1:65:e6:42:87:20:db:02:61:1c:9b:82:
4c:6f:dc:21:b4:26:f9:39:47:2c:bd:09:b0:4c:fe:
05:93:b0:95:1f:de:d6:85:a8:87:2b:b5:a6:a2:f1:
dc:cf:7f:71:3a:f7:7a:fd:21:91:13:18:c4:97:fd:
22:16:d8:8e:2c:0c:bf:1c:13:4f:ba:db:cd:cf:18:
a6:ac:85:7f:ff:e1:7a:69:93:f9:6c:f7:18:8e:98:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:95:55:C4:26:45:1C:CA:C0:DC:0B:9A:35:93:85:ED:FB:BE:F6:E1
X509v3 Authority Key Identifier:
keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7f:bf:a6:6e:c3:5e:a0:0d:c2:58:0c:f3:c0:aa:75:b2:d5:
41:47:df:46:9e:c1:5b:b9:c9:31:06:8c:70:e2:55:eb:90:c1:
10:47:9c:ce:c5:b0:50:e3:02:5f:36:84:eb:80:f5:40:b3:ed:
8c:e5:7e:ee:bf:fb:dc:96:c7:28:9c:22:73:8a:4c:15:c8:58:
fc:97:e9:26:16:81:05:57:bd:5b:c2:ef:8d:a1:32:5d:d4:b1:
04:c0:50:08:55:b6:df:8e:0c:2a:d4:e1:bb:ac:06:6e:b7:8a:
ed:d4:f3:cc:2d:21:f1:33:dc:ee:ca:53:20:ca:c1:04:ea:89:
13:53:70:dc:04:60:71:90:95:1b:11:ad:8d:87:31:f0:48:93:
42:6a:7c:ba:38:0d:75:cb:6a:1c:d3:6e:d0:e3:68:df:b0:87:
e4:6b:b3:b4:87:e2:c8:75:d4:9d:b7:0d:c3:58:05:87:67:69:
cb:bd:16:95:b7:52:c8:83:a4:36:07:05:30:c3:b2:03:b0:db:
c6:ca:eb:a0:da:d4:7f:b1:37:8c:48:fa:de:00:00:7b:d9:c7:
8c:e6:08:04:95:fd:d5:f2:a1:87:cb:5c:be:8c:8a:1c:21:f4:
aa:03:b9:3e:c0:f3:f1:4b:51:09:79:5f:09:97:df:d4:25:6e:
a8:cf:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:55 2026 by rpki-client